CVE-2026-35676

creationtimestamp| type| source ---|---|--- 2026-05-20 15:45:53+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-9qv9-8xv6-5p35 2026-05-28 17:34:05+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmwklaw3se2c...

CVE-2026-56268

creationtimestamp| type| source ---|---|--- 2026-05-20 15:45:19+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-c2c9-mfw7-p8hw...

CVE-2026-48031

creationtimestamp| type| source ---|---|--- 2026-05-20 15:11:45+00:00| published-proof-of-concept| https://github.com/dhax/go-base/security/advisories/GHSA-mqq6-462x-jxmm 2026-08-03 19:54:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3ms7bnbfowl2p...

Exploit for CVE-2026-46300

🔴 Fragnesia — CVE-2026-46300 Élévation de privilèges dans...

CVE-2026-48051

creationtimestamp| type| source ---|---|--- 2026-05-20 15:07:08+00:00| published-proof-of-concept| https://github.com/papra-hq/papra/security/advisories/GHSA-5g86-85rp-f9hx...

poc-lab

VulnClaw-PoC PoC & reproduction scripts for recently disclo...

CVE-2026-45804

creationtimestamp| type| source ---|---|--- 2026-05-20 10:40:56+00:00| published-proof-of-concept| https://github.com/huggingface/diffusers/security/advisories/GHSA-7wx4-6vff-v64p...

CVE-2026-47670

creationtimestamp| type| source ---|---|--- 2026-05-20 09:31:12+00:00| published-proof-of-concept| https://github.com/dbgate/dbgate/security/advisories/GHSA-wm5r-5qp3-5vxf 2026-06-15 06:58:24+00:00| confirmed|...

CVE-2026-47669

creationtimestamp| type| source ---|---|--- 2026-05-20 09:30:38+00:00| published-proof-of-concept| https://github.com/dbgate/dbgate/security/advisories/GHSA-h535-j5hr-mv56 2026-07-23 20:02:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrdmxhn4rv2q...

CVE-2023-29401

creationtimestamp| type| source ---|---|--- 2026-05-20 09:00:05+00:00| published-proof-of-concept| Telegram/zNPCcRZLVUnG7MzXxuguKud9BYCf7Gj51sr3J84x37QbILk...

CVE-2026-44210

creationtimestamp| type| source ---|---|--- 2026-05-20 08:20:32+00:00| published-proof-of-concept| https://github.com/kata-containers/kata-containers/security/advisories/GHSA-rr59-xxvx-96qr...

POCs

----- Summary - This is a POC for CVE-2026-34234 https://cve...

CVE-2024-10821

creationtimestamp| type| source ---|---|--- 2026-05-20 03:00:06+00:00| published-proof-of-concept| Telegram/xh4XcnfPk8jKp2qpT8jzWwwvaCwZdGZH1ZOpAikcTE7X2rw 2026-05-20 09:00:05+00:00| published-proof-of-concept| Telegram/zNPCcRZLVUnG7MzXxuguKud9BYCf7Gj51sr3J84x37QbILk...

CVE-2020-7602

creationtimestamp| type| source ---|---|--- 2026-05-20 03:00:06+00:00| published-proof-of-concept| Telegram/xh4XcnfPk8jKp2qpT8jzWwwvaCwZdGZH1ZOpAikcTE7X2rw 2026-05-20 09:00:05+00:00| published-proof-of-concept| Telegram/zNPCcRZLVUnG7MzXxuguKud9BYCf7Gj51sr3J84x37QbILk...

CVE-2026-2587

creationtimestamp| type| source ---|---|--- 2026-05-20 01:00:51+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmapdtv3ko2w 2026-05-20 22:00:04+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/85099 2026-05-20 23:00:11+00:00| published-proof-of-concept|...

EUVD-2026-31006

Microsoft is aware of a security feature bypass vulnerability in Windows publicly referred to as "YellowKey". The proof of concept for this vulnerability has been made public violating coordinated vulnerability best practices. We are issuing this CVE to provide mitigation guidance that can be...

VIPER-MCP: Detecting and Exploiting Taint-Style Vulnerabilities in Model Context Protocol Servers

Model Context Protocol MCP has emerged as a standard interface for connecting LLM agents to external tools. Because MCP servers expose privileged operations such as shell execution, network access, and file-system manipulation to agent-driven invocation, implementation flaws in tool handlers can...

CVE-2026-9087: Authorization Bypass Through User-Controlled Key

A flaw was found in Keycloak. The cross-session verification proof is keyed only by local userId, idpAlias and is not bound to the upstream identity that was actually verified, so a second upstream account on the same IdP can consume it and get linked to the victim's local account...

CVE-2026-45585

Microsoft is aware of a security feature bypass vulnerability in Windows publicly referred to as "YellowKey". The proof of concept for this vulnerability has been made public violating coordinated vulnerability best practices. We are issuing this CVE to provide mitigation guidance that can be...

CVE-2026-47731

creationtimestamp| type| source ---|---|--- 2026-05-19 22:10:29+00:00| published-proof-of-concept| https://github.com/NASA-AMMOS/AIT-Core/security/advisories/GHSA-p462-prxw-mjx4 2026-07-22 15:18:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrammowolp2a...